Home / server / Questions / 920492
In Process
GP92
Asked: 2018-07-12 07:22:20 +0800 CST

What happens to a ESTABLISHED connection after a firewall restriction is enabled between the hosts in the connection?

  • 772

I would like to know what will happen to an ESTABLISHED connection between two hosts (say A:9999 & B:8888), after a firewall restriction enabled between those two hosts thus preventing any communication between the hosts or on specific ports.

I think we can expect same result when the network service is down.

My observation is the process (in my case: it's ldapsearch query running on 'host A' with a huge output) stops after few minutes, but also the subsequent commands in the parent process fails to run. So, I am confused what is happening and why the subsequent commands can't continue which doesn't have any network dependency like an echo command.

linux-networking

1 Answers

  1. If the firewall is stateful, Then typically the connection will stay open for as long as the tcp session is alive.

    Once the tcp fin_ack is sent by the remote end, then new SYN packets coming from the host that is "blocked" (packets are dropped or replied to with an RST flag or icmp reject) will not get through the firewall to request the new TCP session.

    For UDP, since the protocol is sessionless, traffic will immediately be blocked.

    • 0